OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill generates and potentially executes code based on untrusted external research papers. This creates a surface for indirect prompt injection where a malicious paper could trick the agent into generating harmful code, scripts, or package requirements.
Detected behaviors
No alerts
1 issue
2/2 files flagged